Fortinet 60B manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

Ir para a página of

Bom manual de uso

As regras impõem ao revendedor a obrigação de fornecer ao comprador o manual com o produto Fortinet 60B. A falta de manual ou informações incorretas fornecidas ao consumidor são a base de uma queixa por não conformidade do produto com o contrato. De acordo com a lei, pode anexar o manual em uma outra forma de que em papel, o que é frequentemente utilizado, anexando uma forma gráfica ou manual electrónicoFortinet 60B vídeos instrutivos para os usuários. A condição é uma forma legível e compreensível.

O que é a instrução?

A palavra vem do latim "Instructio" ou instruir. Portanto, no manual Fortinet 60B você pode encontrar uma descrição das fases do processo. O objetivo do manual é instruir, facilitar o arranque, a utilização do equipamento ou a execução de determinadas tarefas. O manual é uma coleção de informações sobre o objeto / serviço, um guia.

Infelizmente, pequenos usuários tomam o tempo para ler o manual Fortinet 60B, e um bom manual não só permite conhecer uma série de funcionalidades adicionais do dispositivo, mas evita a formação da maioria das falhas.

Então, o que deve conter o manual perfeito?

Primeiro, o manual Fortinet 60B deve conte:
- dados técnicos do dispositivo Fortinet 60B
- nome do fabricante e ano de fabricação do dispositivo Fortinet 60B
- instruções de utilização, regulação e manutenção do dispositivo Fortinet 60B
- sinais de segurança e certificados que comprovam a conformidade com as normas pertinentes

Por que você não ler manuais?

Normalmente, isso é devido à falta de tempo e à certeza quanto à funcionalidade específica do dispositivo adquirido. Infelizmente, a mesma ligação e o arranque Fortinet 60B não são suficientes. O manual contém uma série de orientações sobre funcionalidades específicas, a segurança, os métodos de manutenção (mesmo sobre produtos que devem ser usados), possíveis defeitos Fortinet 60B e formas de resolver problemas comuns durante o uso. No final, no manual podemos encontrar as coordenadas do serviço Fortinet na ausência da eficácia das soluções propostas. Atualmente, muito apreciados são manuais na forma de animações interessantes e vídeos de instrução que de uma forma melhor do que o o folheto falam ao usuário. Este tipo de manual é a chance que o usuário percorrer todo o vídeo instrutivo, sem ignorar especificações e descrições técnicas complicadas Fortinet 60B, como para a versão papel.

Por que ler manuais?

Primeiro de tudo, contem a resposta sobre a construção, as possibilidades do dispositivo Fortinet 60B, uso dos acessórios individuais e uma gama de informações para desfrutar plenamente todos os recursos e facilidades.

Após a compra bem sucedida de um equipamento / dispositivo, é bom ter um momento para se familiarizar com cada parte do manual Fortinet 60B. Atualmente, são cuidadosamente preparados e traduzidos para sejam não só compreensíveis para os usuários, mas para cumprir a sua função básica de informação

Índice do manual

  • Página 1

    www.fortinet.com FortiG at e -6 0B FortiO S 3 .0 MR 6 INST ALL GUIDE[...]

  • Página 2

    FortiGate-60 B Install Guide FortiOS 3.0 MR6 10 September 200 8 01-30006-04 46-20080910 © Copyright 2008 Fortine t, Inc. All rights reserved. No part of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mechanical, man ual, optical or otherw[...]

  • Página 3

    Contents FortiGate-60B FortiOS 3.0 MR6 Install Guide 01-30006-0446-2008091 0 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 Register your FortiGate unit ................ .[...]

  • Página 4

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 4 01-30006-0446-200809 10 Contents Configure a DNS server ...................... ................... .................... .......... 22 Adding a default route and gateway . ......... ................. ................ .......... 22 Adding firewall policies . .................... ............. ............[...]

  • Página 5

    Contents FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 5 Configuring the PCMCIA modem card ......................... ................... .............. 45 FortiGate Firmware ............ .................................................. ............ 47 Downloading firmware .. ................ ................. ............[...]

  • Página 6

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 6 01-30006-0446-200809 10 Contents[...]

  • Página 7

    Introduction Register your FortiGate unit FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 7 Introduction Welcome and than k you for selecting Fortinet products fo r your real-time network protection. The FortiGate Unified Threat Man agement System improves network security , reduces network misuse and abuse, and help s you us[...]

  • Página 8

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 8 01-30006-0446-200809 10 About the FortiGate-60B Introduction About the FortiGate-60B The FortiGate-60B multi-thre at security solution of fers Small and Medium Business and SOHO/ROBO users en terprise -class protection against ble nded threats t argeting 3G broadband, wirele ss LAN and wired infrastruct[...]

  • Página 9

    Introduction Further Reading FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 9 Typographic conventions FortiGate document ation uses the fo llowing typographical conven tions: Further Reading The most up-to-date publication s and pr evious re leases of For tinet product documentation are available from the Fortinet T echnical[...]

  • Página 10

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 10 01-30006-0446-200809 10 Customer service and technical support Introduction • FortiGate Log Message Refe rence Available exclusively from the Fortinet Knowledge Center , the FortiG ate Log Message Reference describes the str uct ure of FortiGate log messages and provides information about the log mes[...]

  • Página 11

    Installing Environmental specifications FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 11 Inst alling This chapter describes in stalling your FortiGate unit in your server room, environmental specifications and how to mount the FortiGate in a rack if applicable. This chapter contains the follow ing topics: • Environmenta l[...]

  • Página 12

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 12 01-30006-0446-200809 10 Cautions and warnings Installing • Connect the equipment into a n outlet on a circuit differen t from that to which the receiver is connecte d. • Consult the dealer or an experien ced radio/TV technician for help. The equipme nt compliance with FCC radiation exposu re limit [...]

  • Página 13

    Installing Plugging in the FortiGate FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 13 Mounting If required to fit into a rack unit, remove the rubber feet from the bottom of the FortiGate u nit. Adhere the rubber fee t included in the package to the under side of the FortiGate unit, near the corners of the device. Place the[...]

  • Página 14

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 14 01-30006-0446-200809 10 T urning off the Fo rtiGate unit Installing[...]

  • Página 15

    Configuring NA T vs. T r ansparent mode FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 15 Configuring This section provides an overview of t he operating modes of the FortiGate unit, NA T/Route and T ranspa rent, and how to configure the FortiGate unit for each mode. There are two ways you can configure the Fo rtiGate unit, [...]

  • Página 16

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 16 01-30006-0446-200809 10 Connecting to the FortiGate unit Configuring Transparent mode In T ransparen t mode, the FortiGate u nit is invisible t o the network . Similar to a network bridge, all FortiGate interfaces must be on the same subnet. Y ou only have to configure a mana gement IP address to make [...]

  • Página 17

    Configuring Connecting to the FortiGate unit FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 17 T o support a secure HTTPS authentication method, the FortiGate unit ships with a self-signed security certific ate, which is offered to remote clients whenever they initiate a HTTPS connecti on to the FortiGate unit. When you conn[...]

  • Página 18

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 18 01-30006-0446-200809 10 Configuring NA T mode Configuring Configuring NA T mode Configuring NA T mode involves defining interface addresses an d default routes, and simple firewall p olicies. Y ou can use the web-based manage r or the CLI to configure the FortiGate unit in NA T/Route mode. Using the we[...]

  • Página 19

    Configuring Configuring NA T mode FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 19 4 Select OK. 5 Repeat this procedure for each interf ace as required. Configure a DNS server A DNS server is a service that conver ts symbolic node names to IP add resses. A domain name server (DNS server) implem ents the protoc ol. In simple[...]

  • Página 20

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 20 01-30006-0446-200809 10 Configuring NA T mode Configuring For an initial configuration, you must edit the fa ctory configured static defau lt route to specify a different defau lt gateway for the FortiGat e unit. This will enable the flow of data th rough the FortiGate unit. For details on adding ad di[...]

  • Página 21

    Configuring Configuring NA T mode FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 21 3 Set the following and select OK. Firewall policy configurati on is the same in NA T/Route mode and T ransp arent mode. Note that these policies allo w all traffic throug h. No protection profiles have been applied. Ensure you create additio[...]

  • Página 22

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 22 01-30006-0446-200809 10 Configuring NA T mode Configuring T o set an interface to use PPPo E addressing config system interface edit external set mode pppoe set username <name_str> set password <psswrd> set ipunnumbered <ip_address> set disc-retry-timeout <integer_seconds> set p[...]

  • Página 23

    Configuring Configuring T ransparent mode FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 23 For an initial configuration, you must edit th e factory configured st atic default route to specify a different default gateway for the FortiGate unit. This will enable the flow of data through the FortiGate unit. For details on addi[...]

  • Página 24

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 24 01-30006-0446-200809 10 Configuring T ransparent mod e Configuring Using the web-based manager After conn ecting to the web-based manager , you can use the following procedures to complete the ba sic configur ation of the FortiGate unit. Ensure you read the section “Connectin g to the web-based manag[...]

  • Página 25

    Configuring Configuring T ransparent mode FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 25 T o add an outgoing traffic firewall policy 1 Go to Firewall > Policy . 2 Select Create New . 3 Set the following and select OK. T o add an incoming traffic firewall policy 1 Go to Firewall > Policy . 2 Select Create New . 3 Set[...]

  • Página 26

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 26 01-30006-0446-200809 10 Configuring T ransparent mod e Configuring Configure a DNS server A DNS server is a service that convert s symbolic node names to IP addresses. A domain name server (DNS server ) implemen ts the protocol. In simple te rms, it acts as a phone book for the Internet. A DNS server m[...]

  • Página 27

    Configuring V erify the co nfiguration FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 27 V erify the configuration Y our FortiGate unit is now configured and connected to the network. T o verify the FortiGate unit is connected and configured cor rectly , use your web browser to browse a web site, or use your ema il client to[...]

  • Página 28

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 28 01-30006-0446-200809 10 Restoring a configuration Configuring Restoring a configuration Should you need to restore the config uration file, use the following steps. T o restore the FortiGate co nfiguration 1 Go to System > Maintenance > Backup & Restore . 2 Select to uplo ad the restore f ile[...]

  • Página 29

    Configuring Addition al configurat ion FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 29 T o change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select Change Password and enter a new p assword. 3 Select OK. Alternatively , you can also add new admini strator users by selecting Create New , h[...]

  • Página 30

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 30 01-30006-0446-200809 10 Additional confi guration Configuring[...]

  • Página 31

    Advanced configuration Protection profiles FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 31 Advanced configuration The FortiGate unit and the FortiOS o perating system provide a wide range of features that enable you to control netwo rk and internet traffic an d protect your network. This chapter describes some of these opt[...]

  • Página 32

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 32 01-30006-0446-200809 10 Firewall p olicies Advanced configuration The best way to begin creating your own protectio n profile is to open a predefined profile. This way you can see how a profile is set up, and th en modify it suit your requirements. Y ou access Protecti on profile options by going to Fi[...]

  • Página 33

    Advanced configuration Antivirus options FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 33 Configuring firewall policies T o add or edit a firewall policy go to Firewall > Policy and select Edit on an existing policy , or select Create New to add a policy . The source and des tination Interface/Zone match the firewall pol[...]

  • Página 34

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 34 01-30006-0446-200809 10 AntiSpam options Advanced configuration • Graywar e - These ar e unsolicited commercial so ftware programs th at are installed on computer s, often without the user's consent or knowledge. Grayware progr ams are generally consider ed an annoyance, but thes e programs can [...]

  • Página 35

    Advanced configuration We b filtering FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 35 Banned word lists are specific w ords that may be typically found in email. The FortiGate un it searches f or words or patter ns in email me ssages. If mat ches are found, values assigned to the words are to ta lled. If the defined thresh[...]

  • Página 36

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 36 01-30006-0446-200809 10 Logging Advanced configuration T o configure content blocking, go to W eb Filter > Content Block . URL filter enables you to control additional web sites that you can block or allow . This enables you greater con trol over ce rtain URLs or sub-URLs. The FortiGa te unit allows[...]

  • Página 37

    Configuring the modem interface Selecting a modem mode FortiGate-60B FortiOS 3.0 MR6 Install Guide 01-30006-0446-2008091 0 37 Configuring the modem interface This chapter describes th e modem inte rfac e configuration options. The FortiGate unit supports the mod em interface only when running in NA T/Route mode. Y ou can configure the modem interfa[...]

  • Página 38

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 38 01-30006-0446-200809 10 Configuring modem settings Configuring the modem in terface When the Ether net interface can co nnect to its network again, the FortiGate unit disconnects the modem interf ace and swit ches back to the Ethernet in terface. Stand alone mode In stand alone mo de, the modem interfa[...]

  • Página 39

    Configuring the modem interface Configuring modem setti ngs FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 39 Y ou can configure and use the modem in NA T/Route mode only . T o configure modem settings 1 Go to System > Network > Modem . 2 Select Enable Modem. 3 Change any of the dial-up connection settings. 4 Enter the[...]

  • Página 40

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 40 01-30006-0446-200809 10 Configuring the modem using the CL I Configuring the modem in terface Configuring the modem using the CLI Configure the modem setting s using the CLI. Syntax config system modem set account_relation {equal | fallback} set altmode {enable | disable} set auto-dial {enable | disabl[...]

  • Página 41

    Configuring the modem interface Configuring th e modem using the CLI FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 41 Keyword s and variables Descri ption Default account_relation {equal | fallback} When using a PCMCIA wireless modem, set the relationship betwe en the wireless modem and the internal modem. equal - both acco[...]

  • Página 42

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 42 01-30006-0446-200809 10 Configuring the modem using the CL I Configuring the modem in terface holddown-timer <seconds> Used only wh en the modem is configured as a backup for an interface. Set the ti me (1-60 seconds) that the FortiGate unit waits before switching from the modem interface to the [...]

  • Página 43

    Configuring the modem interface Configuring th e modem using the CLI FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 43 Example This example shows how to en able the modem and configure the modem to ac t as a backup for the WAN1 interface. On ly one dial-u p account is c onfigured. Th e FortiGate unit and modem will a ttempt [...]

  • Página 44

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 44 01-30006-0446-200809 10 Adding a Ping Server Configuring the modem in terface config system modem set action dial set status enable set holddown-timer 5 set interface wan1 set passwd1 acct1passwd set phone1 1234567891 set redial 10 set username1 acct1user end Adding a Ping Server Adding a ping server i[...]

  • Página 45

    Configuring the modem interface Adding firewall policie s for modem connections FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 45 Adding firewall policies for modem connections The modem interface requ ires firewall addresses and policies. Y ou can add one or more addresses to the modem inte rface. For information about addi[...]

  • Página 46

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 46 01-30006-0446-200809 10 Configuring the PCMCIA modem card Configuring the modem inte rface 7 If a security pin is required, enter in the Extra Initialization S tring field in the following format: at+cpin=5555 where 5555 is the pin provide d to you by your ISP . 8 Select Apply . Create a static route, [...]

  • Página 47

    FortiGate Firmware Downloading firmware FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 47 FortiGate Firmware Fortinet periodically updates th e FortiGat e firmware to include new featur es and address issues. After yo u have registered your FortiGate unit, you can download FortiGate firmware updates is available for download[...]

  • Página 48

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 48 01-30006-0446-200809 10 Using the web-based ma nager FortiGate Firmware T o download firmware 1 Log into the site using your user n ame and password. 2 Go to Firmware Images > FortiGate . 3 Select the most recent FortiOS version, and MR release and p atch release. 4 Locate the firmware for your Fort[...]

  • Página 49

    FortiGate Firmware Using the web-based manager FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 49 T o revert to a previous firm ware version 1 Copy the firmware image file to the managem ent computer . 2 Log into the FortiGate web- based manager . 3 Go to System > St atus . 4 Under System Information > Firmware V ersion[...]

  • Página 50

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 50 01-30006-0446-200809 10 Using the CLI FortiGate Firmware T o configure the USB Auto- Insta ll 1 Go to System > Maintenance > Backup and Restore . 2 Select the blue arrow to expa nd the Advanced options. 3 Select the following: • On system restart, auto matically update FortiGate configuration f[...]

  • Página 51

    FortiGate Firmware Using the CLI FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 51 5 Enter the fo llowing command to copy the firmware image from the TFTP server to the FortiGate unit: execute restore image <name_str> <tftp_ip4> Where <name_str> is the nam e of the firmware image file an d <tftp_ip4> [...]

  • Página 52

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 52 01-30006-0446-200809 10 Installing firmware from a system reboot using the CLI FortiGate Firmware 4 Make sure the FortiGate unit can conne ct to the TFTP server . Y ou can use the f ollowing comma nd to ping the computer running the TFTP server . For example, if the TFTP serv er ’s IP address is 192.[...]

  • Página 53

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 53 If you are revert ing to a previou s FortiOS version, you might not be ab le to restore the previous configuration from the backup configuration file . T o install firmware from a sys tem reboot 1 Conne[...]

  • Página 54

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 54 01-30006-0446-200809 10 Installing firmware from a system reboot using the CLI FortiGate Firmware 9 T ype the address of the TFTP server and press Enter: The following message appears: Enter Local Address [192.168.1.188]: 10 T ype an IP address the FortiGate unit can use to connect to the TFTP server .[...]

  • Página 55

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 55 T o restore configuration us ing the CLI 1 Log into the CLI. 2 Enter the following command to re store the configuration files: exec restore image usb <filename> The FortiGate unit responds with t[...]

  • Página 56

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 56 01-30006-0446-200809 10 T esti ng new firmware before installing FortiGate Firmware T esting new firmware before inst alling Y ou can test a new fi rmware image by installing the firmware image from a system reboot and saving it to system memory . After completing this pro cedure, the FortiGate unit op[...]

  • Página 57

    FortiGate Firmware T esting new firmware before installing FortiGate-6 0B FortiOS 3.0 MR 6 Install G uide 01-30006-0446-20080 910 57 8 T ype G to get t he new firmwar e image fr om the TFTP server . The following m essage appears: Enter TFTP server address [192.168.1.168]: 9 T ype the address of the TFTP server an d press Enter: The following m ess[...]

  • Página 58

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 58 01-30006-0446-200809 10 T esti ng new firmware before installing FortiGate Firmware[...]

  • Página 59

    Index FortiGate-60B FortiOS 3.0 MR6 Install Guide 01-30006-0446-2008091 0 59 Index A adding a default ro ute 19, 22 additional resources 9 admin password 28 air flow 11 altmode system modem 41 ambient te mperature 11 antispam options 34 antivirus options 33 auto-dial 38 system modem 41 auto-install 49 auto-install from CLI 55 B backing up 27 C cert[...]

  • Página 60

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 60 01-30006-0446-200809 10 Index Initial Disc Timeout 18 interface system modem 42 interface, configure 21 interface, configuring 18 K Knowledge Center 10 L loggin g 36 M management IP 24 mode system modem 42 modem adding firewall policies 45 auto-dial 41 backup switchover 42 dial-on-demand 41 mode 38 red[...]

  • Página 61

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 61 01-30006-0446-200809 10 Index[...]

  • Página 62

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 62 01-30006-0446-200809 10 Index[...]

  • Página 63

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 63 01-30006-0446-200809 10 Index[...]

  • Página 64

    FortiGate-60B FortiOS 3.0 MR6 Install Guide 64 01-30006-0446-200809 10 Index[...]

  • Página 65

    www.fortinet.com[...]

  • Página 66

    www.fortinet.com[...]